This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/DclAJrQBqx9OgqxAM6QAmtspGAk.roa File: DclAJrQBqx9OgqxAM6QAmtspGAk.roa (raw, json) Hash identifier: YWCRzQwj8j6HFgrAo7ZVPrdD/VumId1KJ89Dfw8z8xQ= Subject key identifier: 0D:C9:40:26:B4:01:AB:1F:4E:82:AC:40:33:A4:00:9A:DB:29:18:09 Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db Certificate serial: 019A9C186C3557D073C21F6FDD4F07D8B2A3 Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/DclAJrQBqx9OgqxAM6QAmtspGAk.roa Signing time: Wed 19 Nov 2025 12:30:37 +0000 ROA not before: Wed 19 Nov 2025 12:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28954 IP address blocks: 80.86.64.0/20 maxlen: 20 194.127.130.0/23 maxlen: 23 194.127.152.0/23 maxlen: 23 2a0a:5a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:18:6c:35:57:d0:73:c2:1f:6f:dd:4f:07:d8:b2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db Validity Not Before: Nov 19 12:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0dc94026b401ab1f4e82ac4033a4009adb291809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ef:a5:44:9a:26:48:06:36:10:d2:56:f9:aa: f1:15:61:67:04:8d:70:dd:cb:6b:0a:87:37:b9:73: 6e:f4:96:4b:7c:a1:76:31:68:53:a2:4d:8a:a3:22: 29:61:f2:bb:69:95:e5:67:02:0d:66:6c:4b:11:27: 90:4e:98:aa:42:3a:6b:e6:e6:c7:fa:b3:0e:51:b4: 7f:01:60:c8:cf:23:69:7b:cb:88:d4:ea:cd:66:9a: 0e:89:3b:4b:83:ec:4e:14:7a:1f:fc:0f:0f:e6:54: ec:07:1b:6c:20:a7:d9:46:10:27:b5:a8:33:24:e9: 3d:dc:f6:89:fa:ed:b9:2f:fb:e7:96:81:2d:a5:79: a4:7d:98:cb:7b:97:e0:b6:a7:82:8d:42:07:f9:42: c4:4c:23:66:35:97:ab:4c:ce:ae:2d:d9:c7:e4:45: 2c:d3:49:a7:b9:3f:5d:d3:97:f4:07:7f:76:d3:fe: c7:c7:7e:04:02:90:82:d6:65:28:d1:ff:7d:2e:ed: 56:7c:bb:bd:00:79:3b:47:85:00:d2:af:05:9c:0f: 43:cd:1a:8f:a9:4d:f4:f5:d2:8f:ab:e5:ff:f2:42: e1:cf:f4:10:c6:3b:86:94:71:98:ad:fb:85:dc:d2: 36:66:c8:f3:0e:b9:cd:68:5d:2d:15:fc:14:25:91: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C9:40:26:B4:01:AB:1F:4E:82:AC:40:33:A4:00:9A:DB:29:18:09 X509v3 Authority Key Identifier: keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/DclAJrQBqx9OgqxAM6QAmtspGAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.64.0/20 194.127.130.0/23 194.127.152.0/23 IPv6: 2a0a:5a00::/29 Signature Algorithm: sha256WithRSAEncryption 3a:cd:43:67:ea:05:45:34:70:92:fd:42:cf:b6:4d:40:cf:d1: 30:96:33:be:00:8b:45:df:ab:86:63:54:3a:6c:3f:bb:e5:e0: 54:10:2b:54:0c:88:f9:ba:40:80:e4:d5:69:ad:0f:73:72:c5: b3:05:11:a8:bd:d8:89:12:c2:2c:b0:e2:6e:a5:cf:7c:14:78: fb:66:e4:79:dd:35:68:9e:44:ee:0d:c0:26:ef:fc:2a:80:b4: 80:22:4b:27:25:39:71:11:b0:0d:a7:47:47:5e:14:b0:d2:70: af:48:63:bf:4c:6f:bf:08:9b:e1:fd:aa:ff:eb:40:c4:ce:ad: d3:88:e9:6a:ce:02:4c:b2:36:d6:ff:bc:d9:de:92:fe:06:b0: 23:08:09:26:58:b2:6f:bf:aa:b7:35:b2:bb:76:f0:d8:cc:c2: 8a:9b:d7:1e:80:c5:30:b5:73:ab:78:22:cb:16:10:0d:97:28: db:5b:69:8d:35:26:a2:5a:4e:01:33:58:58:81:63:14:26:95: 45:29:0c:4c:96:14:d1:d5:d2:b8:f1:aa:88:11:f8:5b:d5:83: 81:6b:30:06:53:78:44:07:b9:8b:6d:ca:42:7c:5b:4e:9c:81: 9f:71:c5:23:03:b7:82:ce:69:c5:87:ec:8e:3b:4e:d1:20:cd: 97:a7:14:29 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZqcGGw1V9Bzwh9v3U8H2LKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1N2IzMjA4MzBhZDA2ZWE3MWE3MjZlOWI4YjNjNDczMjQx MjE5ZGIwHhcNMjUxMTE5MTIzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGM5NDAyNmI0MDFhYjFmNGU4MmFjNDAzM2E0MDA5YWRiMjkxODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne+lRJomSAY2ENJW+arxFWFnBI1w 3ctrCoc3uXNu9JZLfKF2MWhTok2KoyIpYfK7aZXlZwINZmxLESeQTpiqQjpr5ubH +rMOUbR/AWDIzyNpe8uI1OrNZpoOiTtLg+xOFHof/A8P5lTsBxtsIKfZRhAntagz JOk93PaJ+u25L/vnloEtpXmkfZjLe5fgtqeCjUIH+ULETCNmNZerTM6uLdnH5EUs 00mnuT9d05f0B3920/7Hx34EApCC1mUo0f99Lu1WfLu9AHk7R4UA0q8FnA9DzRqP qU309dKPq+X/8kLhz/QQxjuGlHGYrfuF3NI2ZsjzDrnNaF0tFfwUJZEZDwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFA3JQCa0AasfToKsQDOkAJrbKRgJMB8GA1UdIwQY MBaAFBV7MggwrQbqcacm6bizxHMkEhnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMt YzY1MGM3NmQwOGNlLzEvRGNsQUpyUUJxeDlPZ3F4QU02UUFtdHNwR0FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80YzM2NGEtZGI2OC00NDA0LTg5ZTMtYzY1MGM3NmQwOGNl LzEvRlhzeUNEQ3RCdXB4cHlicHVMUEVjeVFTR2RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEUFZAAwQB wn+CAwQBwn+YMA0EAgACMAcDBQMqCloAMA0GCSqGSIb3DQEBCwUAA4IBAQA6zUNn 6gVFNHCS/ULPtk1Az9EwljO+AItF36uGY1Q6bD+75eBUECtUDIj5ukCA5NVprQ9z csWzBRGovdiJEsIssOJupc98FHj7ZuR53TVonkTuDcAm7/wqgLSAIksnJTlxEbAN p0dHXhSw0nCvSGO/TG+/CJvh/ar/60DEzq3TiOlqzgJMsjbW/7zZ3pL+BrAjCAkm WLJvv6q3NbK7dvDYzMKKm9cegMUwtXOreCLLFhANlyjbW2mNNSaiWk4BM1hYgWMU JpVFKQxMlhTR1dK48aqIEfhb1YOBazAGU3hEB7mLbcpCfFtOnIGfccUjA7eCzmnF h+yOO07RIM2XpxQp -----END CERTIFICATE-----Generated at Thu Dec 18 17:28:10 2025 by rpki-client